Approved changes feed: RSS · Atom
cpe:2.3:a:mobile_industrial_robots_a/s:mir100:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Mobile Industrial Robots A/S (5cf57b24-7dc6-5e82-ba65-f8d5605edecb) |
|---|---|
| Product | Mir100 (b1d40ac9-b40a-5534-801a-9a534c50089c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-10280 |
vulnerable | 2026-06-08 05:16:35.091063 |
RVD#2568: Apache server is vulnerable to a DoS
HIGH (8.2)
The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard.
Published: 2020-06-24T05:45:13.897Z
Updated: 2024-09-17T04:09:28.615Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10279 |
vulnerable | 2026-06-08 05:16:35.090272 |
RVD#2569: Insecure operating system defaults in MiR robots
CRITICAL (10)
MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop uses, this operating system presents insecure defaults for robots. These insecurities include a way for users to escalate their access beyond what they were granted via file creation, access race conditions, insecure home directory configurations and defaults that facilitate Denial of Service (DoS) attacks.
Published: 2020-06-24T06:05:23.937Z
Updated: 2024-09-17T02:31:41.340Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10278 |
vulnerable | 2026-06-08 05:16:35.089321 |
RVD#2561: Unprotected BIOS allows user to boot from live OS image.
MEDIUM (6.1)
The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings such as boot order. This can be leveraged by a Malicious operator to boot from a Live Image.
Published: 2020-06-24T04:55:22.857Z
Updated: 2024-09-16T16:13:04.375Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10277 |
vulnerable | 2026-06-08 05:16:35.088464 |
RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalation
MEDIUM (6.4)
There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file) or privilege escalation by manually adding a new user with sudo privileges on the machine.
Published: 2020-06-24T04:55:17.409Z
Updated: 2024-09-17T02:27:32.380Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10276 |
vulnerable | 2026-06-08 05:16:35.087596 |
RVD#2558: Default credentials on SICK PLC allows disabling safety features
CRITICAL (9.8)
The password for the safety PLC is the default and thus easy to find (in manuals, etc.). This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in case an object is too close to the robot. Navigation and any other components dependent on the laser scanner are not affected (thus it is hard to detect before something happens) though the laser scanner configuration can also be affected altering further the safety of the device.
Published: 2020-06-24T04:50:14.520Z
Updated: 2024-09-16T17:08:36.557Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10275 |
vulnerable | 2026-06-08 05:16:35.086580 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10274 |
vulnerable | 2026-06-08 05:16:35.065429 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10273 |
vulnerable | 2026-06-08 05:16:35.064349 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10272 |
vulnerable | 2026-06-08 05:16:35.063459 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10271 |
vulnerable | 2026-06-08 05:16:35.062093 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10270 |
vulnerable | 2026-06-08 05:16:35.061170 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10269 |
vulnerable | 2026-06-08 05:16:35.048457 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.